CLAIMS 



Having thus described our invention, what we claim as new and desire to secure 
by Letters Patent is as follows: 

1. A method comprising accessing virtual iSCSI storage, mcluding the steps of: 

defining at least one physical logical unit number (LUN) on a physical storage 
device having an device IP address; 

associating a unique TCP port number with each said at least one physical LUN; 

replacing a first LUN identifier specified in said iSCSI command with a second 
LUN identifier associated with said given TCP port number; 

establishing a unique IP address at which a virtual LUN is accessed firom a host; 

identifying a block TCP port number with each block range of said virtual LUN; 

mapping a SCSI command to one or more iSCSI/TCP connections having said 
unique IP address and the block TCP port number identified with said each block 
range referenced by said SCSI command; and 

substituting said unique IP address and said block TCP port number with said 
device IP address and said given TCP port number on packets between said host 
and said storage devices. 



DOCKET NUMBER: YOR920020015US1 



-14- 



1 2. A method as recited in claim 1 , further comprising forming a correspondence 

2 between an iSCSI command received on a given TCP port with a particular 

3 physical LUN associated with said given TCP port. 



4 3. A method as recited in claim 1 , wherein said step of accessing results in 

5 forming TCP/iSCSI connections between the host and one or more physical LUNs 

6 without terminating said TCP/iSCSI connection at an intermediate gateway 

7 between said host and said device. 
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4. A method as recited in claim 1 , wherein the step of mapping includes 
converting a single SCSI command to one iSCSI connection per block range 
accessed. 

5. A method as recited in claim 1, wherein the step of substituting includes 
looking up a local substitution map at a gateway having a mapping between 
incoming destination IP address and port number and an outgoing device IP 
address and port number. 

6. A method as recited in claim 1, where a migration of a physical LUN from a 
source storage device to a target storage device requires only updating said 
substitution map to reflect new location of said physical LUN. 



18 7. A method as recited in claim 1 , further comprising: 

1 9 employing IPSec processing support at the host; 



20 employing IPSec processing support at a gateway between said host and said 

21 storage device; and 
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foraiing an IPSec tunnel between said host and said gateway; 



2 g 10. A method comprising providing support at a physical storage device for 

3 accessing virtual iSCSI storage, including the steps of: 

4 defining at least one physical logical unit (LUN) on the physical storage device 

5 having an device IP address; 

6 associating a unique TCP port number with each said at least one physical LUN; 

7 and 

8 replacing a first LUN identifier specified in said iSCSI command with a second 

9 LUN identifier associated with said given TCP port number. 



fi 10 H- A method comprising providmg support at a host for accessing virtual iSCSI 
1 1 storage, including the steps of: 



ia 1 2 establishing a unique IP address at which a virtual LUN is accessed from the host; 



1 3 identifying a block TCP port number with each block range of said virtual LUN; 

14 and 

15 mapping a SCSI command to one or more iSCSI/TCP connections having said 

1 6 unique IP address and the block TCP port number identified with said each block 

1 7 range referenced by said SCSI command; 
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1 / P l2. A method comprising providing support at an intermediate gateway device 

2 between a host and a storage device for accessing virtual iSCSI storage, including 

3 the step of substituting a host-specified IP address and a host-specified TCP port 

4 number with a device IP address and a TCP port number within that device 

5 according to a substitution table describing the virtual to physical storage mapping 

6 for incoming packets before forwarding said packets. 

7 1^ An apparatus comprising: 

8 a conversion module at a physical storage device for accessing virtual iSCSI 

9 storage, coupled to means for defining at least one physical logical unit (LUN) on 
10 the physical storage device having an device IP address; and coupled to means for 

p 1 1 associating a unique TCP port number with each said at least one physical LUN; 

12 said conversion module to replace a first LUN identifier specified in said iSCSI 

^ 13 command with a second LUN identifier associated with said given TCP port 

lisp 

1^ 14 number. 

%^ 

1 5 / L M. An apparatus at a physical storage device for accessing virtual iSCSI storage, 

H 16 comprising: 

w 

Q 

17 means for replacing a first LUN identifier specified in an iSCSI command with a 

1 8 second LUN identifier associated with a given TCP port number included in said 

19 iSCSI command; 

20 means for defining at least one physical logical unit (LUN) on the physical 

2 1 storage device having an device IP address; and 
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1 means for associating a unique TCP port number with each said at least one 

2 physical LUN. 

3 1^ . An apparatus comprising a virtualization module at a host for accessing 

4 virtual iSCSI storage, said virtualization module includes: 

5 means for establishing a unique IP address at which a virtual LUN is accessed 

6 from the host; 

7 means for identifying a block TCP port number with each block range of said 

8 virtual LUN; and 

9 ^ means for mapping a SCSI command to one or more iSCSI/TCP connections 

1 0 having said unique IP address and the block TCP port number identified with said 

1 1 each block range referenced by said SCSI command. 

12 /i^ An apparatus comprising a virtualization module at a host for accessing virtual 

13 iSCSI storage, said virtualization module includes: 

14 a control module establishing a imique IP address at which a virtual LUN is 

1 5 accessed from the host, and for identifying a block TCP port nximber with each 

1 6 block range of said virtual LUN; and 

17 a driver module for mapping a SCSI command to one or more iSCSI/TCP 

1 8 connections having said unique IP address and the block TCP port number 

19 identified with said each block range referenced by said SCSI command, 

20 . An apparatus comprising: 
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an address translation module at an intermediate gateway device between a host 
and a storage device for accessing virtual iSCSI storage, said address translation 
module having a substitution table describing a virtual to physical storage 
mapping, said address translation module to replace a host-specified IP address 
and a host-specified TCP port number with a device IP address and a TCP port 
nximber within said intermediate gateway device according to the substitution 
table for incoming packets before forwarding said incoming packets. 



p An apparatus at an intermediate gateway device between a host and a storage 
device for accessing virtual iSCSI storage, 

said intermediate gateway device having a a substitution table, said substitution 
table describing a virtual to physical storage mapping of IP addresses and TCP 
port numbers; said apparatus comprising: 

means for replacing a host-specified IP address and a host-specified TCP port 
number, with an IP address and a TCP port number of the storage device, within 
said intermediate gateway device, according to the substitution table for incoming 
packets before forwarding said incoming packets. 



^ An article of manufacture comprising a computer usable medium having 
computer readable program code means embodied therein for causing accessing 
virtual iSCSI storage,, the computer readable program code means in said article 
of manufacture comprising computer readable program code means for causing a 
computer to effect the steps of claim 1. 

^ 2Q/ A program storage device readable by machine, tangibly embodying a 
program of instructions executable by the machine to perform method steps for 
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1 accessing virtual iSCSI storage,, said method steps comprising the steps of claim 

2 L. 

3 / ^ A computer program product comprising a computer usable medium having 

4 computer readable program code means embodied therein for causing LUN 

5 identifier substitution, the computer readable program code means in said 

6 computer program product comprising computer readable program code means 

7 for causing a computer to effect the functions of claim 13. 

8 ^0 A computer program product comprising a computer usable mediimi having 

9 computer readable program code means embodied therein for causing LUN 

10 identifier substitution, the computer readable program code means in said 

1 1 computer program product comprising computer readable program code means 

12 for causing a computer to effect the functions of claim 14. 

13 cjj^ ^ A computer program product comprising a computer usable medium having 

14 computer readable program code means embodied therein for causing SCSI 

15 command mapping, the computer readable program code means in said computer 

16 program product comprising computer readable program code means for causing 

17 a computer to effect the functions of claim 15. 

1 8 V ^ ^ computer program product comprising a computer usable medium having 

19 computer readable program code means embodied therein for causing SCSI 

20 command mapping, the computer readable program code means in said computer 

2 1 program product comprising computer readable program code means for causing 

22 a computer to effect the functions of claim 1 6. 
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2^ 2^. A computer program product comprising a computer usable mediim havm^ 
computer readable program code means embodied therein for causing address 
substitution, the computer readable program code means in said computer 
program product comprising computer readable program code means for causing 
a computer to effect the functions of claim 17. 



^ A computer program product comprising a computer usable medium having 
computer readable program code means embodied therein for causing address 
substitution, the computer readable program code means in said computer 
program product comprising computer readable program code means for causing 
a computer to effect the functions of claim 18. 
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